Payflex Payment Gateway
Payflex Payment Gateway has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; all 3 are fixed as of October 2026. Their average CVSS score is 5.8, and the most serious one scores 6.1 out of 10. 2024 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 1 of the records (33%). Other recurring categories include Missing Authorization, Open Redirect.
Every one of the 3 issues recorded for Payflex Payment Gateway has a vendor fix available, so running the current release closes all known holes.
3 independent researchers contributed these findings, one record each. Payflex Payment Gateway is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2026-103346Payflex Payment Gateway <= 2.7.1 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records
Payflex Payment Gateway
Author
tomlister
The Payflex extension for WooCommerce enables you to accept payments in installments via one of South Africa’s most popular payment gateways. Why choose Payflex? Give your customers a better way to pay and they’ll have more reason to buy.Payflex is proven to increase sales conversion rates and average order values.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C